Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: h5Wfulbz5JSU72DBCyZF9+d5Yu2QxdOfUDIo/r/8WGM=
Subject key identifier: 0C:D5:6A:6E:14:0F:15:3C:E2:CF:09:72:3A:4B:7B:6C:5A:1F:93:16
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019CADC8195E4DDE1DCC511F39325D0A776A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 0713
Signing time: Mon 02 Mar 2026 09:01:37 +0000
Manifest this update: Mon 02 Mar 2026 09:01:37 +0000
Manifest next update: Tue 03 Mar 2026 09:01:37 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: A4fTwE1GShJZBihhmzsZJsFxf+e5LLBtS6bHlVFWVuM=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:19:5e:4d:de:1d:cc:51:1f:39:32:5d:0a:77:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Mar 2 09:01:37 2026 GMT
Not After : Mar 3 09:01:37 2026 GMT
Subject: CN=0cd56a6e140f153ce2cf09723a4b7b6c5a1f9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:db:12:b5:cf:9c:25:8e:e9:76:37:b8:e9:
59:09:74:9e:17:d5:b3:2f:3a:3c:6a:9c:49:8c:bf:
7d:d2:bb:6a:16:c7:1f:55:41:4c:49:e2:8d:43:a9:
89:27:db:bb:21:7a:62:7f:07:f6:39:a7:18:33:29:
30:94:f0:49:f6:c4:ca:f7:9d:d6:96:72:95:08:cb:
e0:50:f0:bb:7a:52:1c:2a:c3:68:2c:3c:17:66:fe:
a9:af:db:4e:e3:bd:ab:bb:48:6d:59:18:a1:65:6f:
36:e7:68:d7:73:25:14:83:6e:b7:8a:1b:a0:65:f6:
af:28:bf:82:6a:05:19:ba:6d:b2:0e:19:60:4f:b7:
cd:64:58:f6:3f:3f:e5:bc:f9:9a:ff:32:50:1c:a4:
26:56:83:95:d8:17:c8:1e:9e:2b:90:cf:36:56:21:
f3:4d:02:c0:dc:d9:fb:f2:a1:ca:4a:d4:e2:44:60:
f0:3e:67:90:15:d1:00:2c:0f:48:32:6c:1c:47:41:
8e:40:ee:43:5f:d0:f3:32:b4:32:38:11:37:24:58:
b3:ed:ea:17:b4:a2:b3:20:18:37:c1:1f:dd:52:c5:
f7:d4:ea:b4:bd:52:08:54:0f:a4:96:fa:70:aa:8d:
5e:55:0a:6d:fb:78:e6:77:5f:03:1e:d7:da:1a:26:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D5:6A:6E:14:0F:15:3C:E2:CF:09:72:3A:4B:7B:6C:5A:1F:93:16
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:0e:4a:f6:e5:fd:52:e0:bb:99:3e:25:86:48:bf:a2:af:
9a:8f:6b:c3:55:35:5c:57:d3:9f:55:44:e2:03:c4:22:a8:75:
74:f2:da:ed:70:8b:08:70:74:17:a3:17:1d:24:50:ce:e7:ab:
92:b2:a9:a5:9f:16:8c:52:fe:99:42:44:4f:5c:95:25:e8:89:
f9:5b:4a:30:cb:52:03:69:b7:63:58:7c:c4:ed:fa:1b:15:4d:
cb:92:f4:40:a9:cc:0a:0d:2a:ad:ed:29:ce:6c:87:66:f3:91:
df:3f:99:f8:0a:42:26:b5:ad:d3:78:5d:fa:49:58:14:e1:76:
21:a2:62:5c:bb:f5:59:45:fd:94:1e:14:ac:68:42:52:b4:20:
f9:56:d2:84:c1:24:e0:ba:cf:ec:97:2e:c6:09:2b:c8:d9:1b:
eb:f7:50:17:62:9e:08:76:4d:d5:23:61:93:dc:56:f7:5f:94:
f5:83:ec:98:47:fe:4e:1f:f1:f4:38:5c:91:4a:8b:7f:6a:43:
a1:d2:1d:ea:54:36:cd:28:1f:3c:59:11:c5:5e:ee:fb:da:be:
8b:7b:d7:dc:d2:c1:3a:f8:b1:e2:83:b0:f7:c3:76:15:7a:42:
a4:e0:62:3a:61:33:d1:0b:ca:e4:4f:78:25:1e:92:77:48:d0:
f4:4c:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:37 2026 by rpki-client